SUSE-SU-2018:0383-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP3 kernel was updated to 4.4.114 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-5715: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of...

SUSE-SU-2018:0261-1 Recommended update for apache2

This update for apache2 fixes several issues. These security issues were fixed: - CVE-2017-9789: When under stress closing many connections the HTTP/2 handling code would sometimes access memory after it has been freed, resulting in potentially erratic behaviour bsc1048575. - CVE-2017-7659: A...

SUSE-SU-2018:0179-1 Security update for wireshark

This update for wireshark to version 2.2.12 fixes the following issues: - CVE-2018-5334: IxVeriWave file could crash bsc1075737 - CVE-2018-5335: WCP dissector could crash bsc1075738 - CVE-2018-5336: Multiple dissector crashes bsc1075739 - CVE-2017-17935: Incorrect handling of '\n' in filereadline...

SUSE-SU-2017:2555-1 Security update for wireshark

This update for wireshark to version 2.2.9 fixes several issues. These security issues were fixed: - CVE-2017-13767: The MSDP dissector could have gone into an infinite loop. This was addressed by adding length validation bsc1056248. - CVE-2017-13766: The Profinet I/O dissector could have crash...

SUSE-SU-2017:2522-1 Security update for php53

This update for php53 fixes the several issues. These security issues were fixed: - CVE-2017-12933: The finishnesteddata function in ext/standard/varunserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact ...

SUSE-SU-2017:2199-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c bsc1042826 - CVE-2017-9440: A memory leak was found in the function ReadPSDChannelin coders/psd.c bsc1042812 - CVE-2017-9501: An...

SUSE-SU-2017:1886-1 Security update for gnutls

This update for gnutls fixes the following issues: - GNUTLS-SA-2017-3 / CVE-2017-7869: An out-of-bounds write in OpenPGP certificate decoding was fixed bsc1034173 - CVE-2017-6891: A potential stack buffer overflow in the bundled libtasn1 was fixed bsc1040621 - An address read of 4 bytes past the...

SUSE-SU-2017:1662-1 Security update for php5

This update for php5 fixes the following security issues: - CVE-2016-6294: The localeacceptfromhttp function in ext/intl/locale/localemethods.c did not properly restrict calls to the ICU ulocacceptLanguageFromHTTP function, which allowed remote attackers to cause a denial of service out-of-bounds...

SUSE-SU-2017:1660-1 Security update for tomcat

Tomcat was updated to version 7.0.78, fixing various bugs and security issues. For full details see https://tomcat.apache.org/tomcat-7.0-doc/changelog.html Security issues fixed: - CVE-2016-0762: A realm timing attack in tomcat was fixed which could disclose existence of users bsc1007854 -...

SUSE-SU-2017:1635-1 Security update for openvpn

This update for openvpn fixes the following issues: - Some parts of the certificate-parsing code did not always clear all allocated memory. This would have allowed clients to leak a few bytes of memory for each connection attempt, thereby facilitating a quite inefficient DoS attack on the server...

SUSE-SU-2017:0468-1 Security update for gd

This update for gd fixes the following security issues: - CVE-2016-6906: An out-of-bounds read in TGA decompression was fixed which could have lead to crashes. bsc1022553 - CVE-2016-6912: Double free vulnerability in the gdImageWebPtr function in the GD Graphics Library aka libgd allowed remote...

SUSE-SU-2017:0128-1 Security update for squid

This update for squid fixes the following issues: - CVE-2016-10003: Prevent incorrect forwarding of cached private responses when Collapsed Forwarding feature is enabled. This allowed remote attacker proxy user to discover private and sensitive information about another user bsc1016169. -...

SUSE-SU-2016:3081-1 Security update for tomcat

This update for tomcat fixes the following issues: Feature changes: The embedded Apache Commons DBCP component was updated to version 2.0. bsc1010893 fate321029 Security fixes: - CVE-2016-0762: Realm Timing Attack bsc1007854 - CVE-2016-5018: Security Manager Bypass bsc1007855 - CVE-2016-6794:...

SUSE-SU-2016:3054-1 Security update for xorg-x11-libX11

This update for xorg-x11-libX11 fixes the following issues: - plug a memory leak bsc1002991, CVE-2016-7942 - insufficient validation of data from the X server can cause out of boundary memory read XGetImage or write XListFonts bsc1002991, CVE-2016-7942...

SUSE-SU-2016:2506-1 Security update for freerdp

This update for freerdp fixes the following issues: - CVE-2013-4118: Added a NULL pointer check to fix a server crash bsc829013. - CVE-2014-0791: Integer overflow in the licensereadscopelist function in libfreerdp/core/license.c in FreeRDP allowed remote RDP servers to cause a denial of service...

SUSE-SU-2016:2477-2 Security update for php5

This update for php5 fixes the following security issues: CVE-2016-7411: php5: Memory corruption when destructing deserialized object CVE-2016-7412: Heap overflow in mysqlnd when not receiving UNSIGNEDFLAG in BIT field CVE-2016-7413: Use after free in wddxdeserialize CVE-2016-7414: Out of bounds...

SUSE-SU-2016:2396-1 Security update for apache2-mod_nss

This update provides apache2-modnss 1.0.14, which brings several fixes and enhancements: - Fix OpenSSL ciphers stopped parsing at +. CVE-2016-3099 - Created valgrind suppression files to ease debugging. - Implement SSLPPTYPEFILTER to call executables to get the key password pins. - Improvements t...

SUSE-SU-2016:2355-1 Security update for libstorage

This update for libstorage fixes the following issues: - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746...

SUSE-SU-2016:2079-1 Security update for libidn

This update for libidn fixes the following issues: - CVE-2016-6262 and CVE-2015-8948: Out-of-bounds-read when reading one zero byte as input bsc990189 - CVE-2016-6261: Out-of-bounds stack read in idnatoascii4i bsc990190 - CVE-2016-6263: stringpreputf8nfkcnormalize reject invalid UTF-8 bsc990191 -...

SUSE-SU-2016:1277-1 Security update for php5

This update for php5 fixes the following security issues: - CVE-2016-4073: A remote attacker could have caused denial of service, or possibly execute arbitrary code, due to incorrect handling of string length calculations in mbstrcut bsc977003 - CVE-2015-8867: The PHP function...

SUSE-SU-2016:1022-1 Security update for samba

Samba was updated to the 4.2.x codestream, bringing some new features and security fixes bsc973832, FATE320709. These security issues were fixed: - CVE-2015-5370: DCERPC server and client were vulnerable to DOS and MITM attacks bsc936862. - CVE-2016-2110: A man-in-the-middle could have downgraded...

SUSE-SU-2016:0967-1 Security update for rubygem-actionpack-3_2

This update for rubygem-actionpack-32 fixes the following issues: - CVE-2016-2097: rubygem-actionview: Possible Information Leak Vulnerability in Action View. bsc968850 - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack bsc968849...

SUSE-SU-2016:0857-1 Security update for rubygem-activesupport-4_1

This update for rubygem-activesupport-41 fixes the following issues: The previous security patch for CVE-2015-7576 was adding a new file but this file was not being added in the gemspec, thus the resulting gem didn't have it. This update includes the patch in the gem file too...

SUSE-SU-2016:0858-1 Security update for rubygem-actionpack-4_1

This update for rubygem-actionpack-41 fixes the following issues: - CVE-2016-0751: Object Leak DoS bsc963331 - CVE-2015-7581: unbounded memory growth DoS via wildcard controller routes bsc963335 - CVE-2016-0752: directory traversal and information leak in Action View bsc963332 - CVE-2015-7576:...

SUSE-SU-2016:0401-1 Security update for java-1_7_1-ibm

This update for java-171-ibm fixes the following issues by updating to 7.1-3.30 bsc963937: - CVE-2015-5041: Could could have invoked non-public interface methods under certain circumstances - CVE-2015-7575: The TLS protocol could allow weaker than expected security caused by a collision attack wh...

SUSE-SU-2016:0284-1 Security update for php5

This update for php5 fixes the following issues: - CVE-2015-7803: Specially crafted .phar files with a crafted TAR archive entry allowed remote attackers to cause a Denial of Service DoS bsc949961 - CVE-2016-1903: Specially crafted image files could could allow remote attackers read unspecified...

SUSE-SU-2016:0050-1 Security update for libpng12

This update fixes the following security issue CVE-2015-8126 Multiple buffer overflows in the pngsetPLTE and pnggetPLTE functions allow remote attackers to cause a denial of service application crash or possibly have unspecified other impact bsc954980...

SUSE-SU-2015:2292-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.51 to receive various security and bugfixes. Following features were added: - hwrng: Add a driver for the hwrng found in power7+ systems fate315784. Following security bugs were fixed: - CVE-2015-8215: net/ipv6/addrconf.c in the IPv6 sta...

SUSE-SU-2015:1727-1 Security update for kernel-source

The SUSE Linux Enterprise 12 kernel was updated to 3.12.48-52.27 to receive various security and bugfixes. Following security bugs were fixed: CVE-2015-7613: A flaw was found in the Linux kernel IPC code that could lead to arbitrary code execution. The ipcaddid function initialized a shared objec...

SUSE-SU-2015:1818-1 Security update for php53

This update of PHP5 brings several security fixes. Security fixes: CVE-2015-6831: A use after free vulnerability in unserialize has been fixed which could be used to crash php or potentially execute code. bnc942291 bnc942294 bnc942295 CVE-2015-6836: A SOAP serializefunctioncall type confusion...

SUSE-SU-2015:1701-1 Security update for php5

The PHP5 script interpreter was updated to fix security issues: CVE-2015-6836: A SOAP serializefunctioncall type confusion leading to remote code execution problem was fixed. bnc945428 CVE-2015-6837 CVE-2015-6838: Two NULL pointer dereferences in the XSLTProcessor class were fixed. bnc945412...

SUSE-SU-2015:1425-1 Security update for php5

PHP was updated to fix two security issues. The following vulnerabilities were fixed: CVE-2015-5589: PHP could be crashed when processing an invalid file with the 'phar' extension with a segfault in Phar::convertToData, leading to Denial of Service DOS bsc938721 CVE-2015-5590: PHP could be crashe...

SUSE-SU-2015:0547-1 Security update for compat-openssl097g

OpenSSL was updated to fix several security issues: CVE-2015-4000: The Logjam Attack weakdh.org has been addressed by rejecting connections with DH parameters shorter than 1024 bits. 2048-bit DH parameters are now generated by default. CVE-2015-1789: An out-of-bounds read in X509cmptime was fixed...

SUSE-SU-2015:0281-1 Security update for strongswan

This strongswan update fixes the following security and non security issues. - Disallow brainpool elliptic curve groups in fips mode bnc856322. - Applied an upstream fix for a denial-of-service vulnerability, which can be triggered by an IKEv2 Key Exchange payload, that contains the Diffie-Hellma...

SUSE-SU-2015:0343-1 Security update for IBM Java

java-170-ibm has been updated to version 1.7.0sr7.2 to fix 21 security issues. These security issues have been fixed: Unspecified vulnerability CVE-2014-3065. The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for...

SUSE-SU-2015:1018-1 Security update for php53

This update fixes the following vulnerabilities in php: Heap corruption issue in exifthumbnail. CVE-2014-3670 Integer overflow in unserialize. CVE-2014-3669 Xmlrpc ISO8601 date format parsing out-of-bounds read in mkgmtime. CVE-2014-3668 Security Issues: CVE-2014-3669 CVE-2014-3670 CVE-2014-3668...

SUSE-SU-2015:1376-1 Security update for Linux kernel

The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix various bugs and security issues. The following security bugs have been fixed: CVE-2014-1739: The mediadeviceenumentities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a...

SUSE-SU-2015:1152-1 Security update for kvm

kvm has been updated to fix issues in the embedded qemu: CVE-2014-0223: An integer overflow flaw was found in the QEMU block driver for QCOW version 1 disk images. A user able to alter the QEMU disk image files loaded by a guest could have used this flaw to corrupt QEMU process memory on the host...

SUSE-SU-2015:0944-1 Security update for Xen

XEN has been updated to fix various bugs and security issues: CVE-2013-0153: XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device...

SUSE-SU-2026:4405-1 Security update for wicked2nm

This update for wicked2nm fixes the following issue: - serdewith: KeyValueMap serialization panics on empty sequence or map entries bsc1271848. Changes for wicked2nm: - Update v1.5.2. - Update v1.5.1: Update agama to fix default vlan flags bsc1271079...

SUSE-SU-2026:4400-1 Security update for gdb

This update for gdb fixes the following issue: - CVE-2026-13732: Out-of-bounds write in STABS parser readmemberfunctions via crafted ELF bsc1277757...

SUSE-SU-2026:4200-1 Security update for gvfs

This update for gvfs fixes the following issues: - CVE-2026-84267: readstring allocates buffers withouth verifying that the buffer is completely filled when communicating with a malicious SFTP server, which can lead to uninitialized heap memory leaks bsc1278157. - CVE-2026-84268: readreply...

SUSE-SU-2026:4179-1 Security update for clamav

This update for clamav fixes the following issues: - CVE-2026-20337: Improper boundary checks for content in zip archive parser bsc1274597. - CVE-2026-20338: invalid free due to bad ownership handling when merging ZIP catalogue records bsc1274598. - CVE-2026-20339: integer overflow in the PESpin...

SUSE-SU-2026:4152-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...

SUSE-SU-2026:23535-1 Security update for the Linux Kernel (Live Patch 25 for SUSE Linux Enterprise Micro 6.0)

This update for the SUSE Linux Enterprise Kernel 6.4.0-48.1 fixes various security issues: The following security issues were fixed: - CVE-2026-46242: eventpoll: fix epremove struct eventpoll / struct file UAF bsc1270300. - CVE-2026-46319: net/sched: actct: Only release RCU read lock after ctft...

SUSE-SU-2026:3670-1 Security update for containerd

This update for containerd rebuilds it against the current go security release...

SUSE-SU-2026:3629-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2026-29518: Symlink-Race TOCTOU in Daemon bsc1264511. - CVE-2026-43619: Symlink Race Condition via Path-Based Syscalls bsc1264514...

SUSE-SU-2026:3338-1 Security update for webkit2gtk3

This update for webkit2gtk3 fixes the following issues: - CVE-2024-4367: missing type check when handling fonts in PDF.js can allow arbitrary JavaScript execution bsc1271638. - CVE-2026-39872: maliciously crafted web content can lead to an unexpected process crash bsc1271638. - CVE-2026-43663:...

SUSE-SU-2026:3256-1 Security update for the Linux Kernel (Live Patch 14 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.52 fixes various security issues: The following security issues were fixed: - CVE-2026-23240: tls: Fix race condition in tlsswcancelworktx bsc1262404. - CVE-2026-31738: vxlan: validate ND option lengths in vxlannacreate bsc1264060. ...

SUSE-SU-2026:3088-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.119. Security issues fixed: - CVE-2026-50229: improper neutralization of script-related HTML tags in the number guess example bsc1269791. - CVE-2026-53404: always-incorrect control flow implementation in the rewrite valve caus...